diff options
| author | Nick Sanders <nsanders@chromium.org> | 2017-06-27 17:58:45 -0700 |
|---|---|---|
| committer | chrome-bot <chrome-bot@chromium.org> | 2017-10-06 00:21:29 -0700 |
| commit | 02045eb040227250689caec9b9401c2cd3861363 (patch) | |
| tree | f09e73f9794a6e581c3ae3ff2e5c344dd2dd0b63 /chip/g/dcrypto | |
| parent | 366c36c8f1655c57f4c05d000cb4c000020d10db (diff) | |
| download | chrome-ec-02045eb040227250689caec9b9401c2cd3861363.tar.gz | |
mn50: add data signing capability
Add a PERSO_AUTH appid to sign data passed through the
AUTH mn50.
Add a signer command to start and generate signatures.
Clean UART init to avoid spurious nonprinting characters
that will contaminate the siugnature.
BUG=b:36910757
BRANCH=None
TEST=generates signature for uart and spi
Signed-off-by: Nick Sanders <nsanders@chromium.org>
Change-Id: I5fc3c4ee34898421060b57b774a09734f6a1bae5
Reviewed-on: https://chromium-review.googlesource.com/670984
Reviewed-by: Marius Schilder <mschilder@chromium.org>
Diffstat (limited to 'chip/g/dcrypto')
| -rw-r--r-- | chip/g/dcrypto/app_key.c | 10 | ||||
| -rw-r--r-- | chip/g/dcrypto/dcrypto.h | 1 |
2 files changed, 11 insertions, 0 deletions
diff --git a/chip/g/dcrypto/app_key.c b/chip/g/dcrypto/app_key.c index e2b709f3c0..173bc9d214 100644 --- a/chip/g/dcrypto/app_key.c +++ b/chip/g/dcrypto/app_key.c @@ -49,6 +49,16 @@ const struct { 0xcd375bcd, 0x8065e8cc, 0xc892ed69, 0x72436c7d } }, +#ifdef CONFIG_STREAM_SIGNATURE + { + /* This key signs data from H1's configured by mn50/scribe. */ + "PERSO_AUTH", + { + 0x2019da34, 0xf1a01a13, 0x0fb9f73f, 0xf2e85f76, + 0x5ecb7690, 0x09f732c9, 0xe540bf14, 0xcc46799a + } + }, +#endif }; int DCRYPTO_appkey_init(enum dcrypto_appid appid, struct APPKEY_CTX *ctx) diff --git a/chip/g/dcrypto/dcrypto.h b/chip/g/dcrypto/dcrypto.h index 5c643382c6..e964288f84 100644 --- a/chip/g/dcrypto/dcrypto.h +++ b/chip/g/dcrypto/dcrypto.h @@ -271,6 +271,7 @@ enum dcrypto_appid { U2F_ATTEST = 2, U2F_ORIGIN = 3, U2F_WRAP = 4, + PERSO_AUTH = 5, /* This enum value should not exceed 7. */ }; |